Re: silently discarding infected messages

Andrew Gay said:
> Hi all
>
> I'm trying to use exim's 'discard' ACL verb to silently reject messages
> containing virusses.  Up to now I have used 'deny' which has the unwanted
> effect of causing a bounce message to be generated by the upstream MTA.
>
> Here's my complete data ACL:
>
> check_message:
>
[snip]
> # Use discard instead of deny to silently accept virusses and delete
> # them. The defer_ok causes the message to get through in case scanner
> # is down.

warn    log_message = R=<$recipients> contains virus ($malware_name)
        demime = *
        malware = */defer_ok

discard log_message = R=<$recipients> contains virus ($malware_name)
        demime = *
        malware = */defer_ok

> The problem is that the log_message clause appears to be ignored.  When
> an infected message arrives, the exim_mainlog shows
>
> 2004-08-17 10:03:08 1Bwzs3-0004A4-63 => blackhole (DATA ACL discarded
> recipients)


Use a warn statement like above and you will get your log message in the
logs.